Add a central global autoblocks exemption list
Closed, ResolvedPublic2 Estimated Story Points
Actions

Description

To implement T374863: Prevent global autoblocks on a configurable list of IP addresses, we should add a on-wiki message on the GlobalBlockingCentralWiki (defined as metawiki on WMF wikis) that lists IP addresses that are exempt from global autoblocks. This task is to create the message for this list and also create a service that allows interacting with the list, which will work similar to MediaWiki core's AutoblockExemptionList service.

Acceptance criteria

Add a service to GlobalBlocking that allows callers to know if a IP address is exempt from global autoblocks, by reading the on-wiki message (this being similar to MediaWiki core's AutoblockExemptionList service).

Details

Related Changes in Gerrit:

	Subject	Repo	Branch	Lines +/-
	Expand GlobalBlockingGlobalAutoblockExemptionListProvider	mediawiki/extensions/GlobalBlocking	master	+286 -9
	Add GlobalBlockingGlobalAutoblockExemptionListProvider	mediawiki/extensions/GlobalBlocking	master	+211 -2

Customize query in gerrit

Related Objects
Search...

Status	Assigned	Task
		Restricted Task
Resolved	kostajh	T294511 2021 Security Team wikireplicas audit
Declined	None	T284948 Raw IPs of logged-out users disclosed in wiki-replicas
Resolved	Niharika	T324492 Temporary accounts - MVP
Resolved	Madalina	T326816 [Epic] Update features for temporary accounts
Open	None	T355286 [Epic] Globally blocking a temporary account should prevent further account creations
Resolved	Dreamy_Jazz	T368949 [Epic] Implement global autoblocks from global user blocks
Resolved	Dreamy_Jazz	T374863 Prevent global autoblocks on a configurable list of IP addresses
Resolved	Dreamy_Jazz	T375580 Add a central global autoblocks exemption list

Event Timeline

Dreamy_Jazz created this task.Sep 24 2024, 11:41 PM

Dreamy_Jazz moved this task from Priority Backlog to In Progress on the Trust and Safety Product Sprint (Sprint Beatboxing (Sept 16-27)) board.

Dreamy_Jazz set the point value for this task to 2.

Change #1075344 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[mediawiki/extensions/GlobalBlocking@master] [WIP] Add GlobalBlockingGlobalAutoblockExemptionListProvider

https://gerrit.wikimedia.org/r/1075344

gerritbot added a project: Patch-For-Review.Sep 25 2024, 12:25 AM

Dreamy_Jazz moved this task from Backlog to In progress on the Temporary accounts (Blockers to minor pilot wiki deployment) board.Sep 25 2024, 9:26 AM

Change #1075641 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[mediawiki/extensions/GlobalBlocking@master] Expand GlobalBlockingGlobalAutoblockExemptionListProvider

https://gerrit.wikimedia.org/r/1075641

Dreamy_Jazz moved this task from In Progress to Needs review on the Trust and Safety Product Sprint (Sprint Beatboxing (Sept 16-27)) board.Sep 25 2024, 9:48 PM

Change #1075344 merged by jenkins-bot:

[mediawiki/extensions/GlobalBlocking@master] Add GlobalBlockingGlobalAutoblockExemptionListProvider

https://gerrit.wikimedia.org/r/1075344

ReleaseTaggerBot added a project: MW-1.43-notes (1.43.0-wmf.25; 2024-10-01).Sep 26 2024, 1:00 PM

Change #1075641 merged by jenkins-bot:

[mediawiki/extensions/GlobalBlocking@master] Expand GlobalBlockingGlobalAutoblockExemptionListProvider

https://gerrit.wikimedia.org/r/1075641

This will be hard to QA at this time, so I propose that QA be done in T374863: Prevent global autoblocks on a configurable list of IP addresses once the service is used.

Dreamy_Jazz closed this task as Resolved.Sep 26 2024, 2:27 PM

Maintenance_bot removed a project: Patch-For-Review.Sep 26 2024, 2:31 PM

Add a central global autoblocks exemption listClosed, ResolvedPublic2 Estimated Story PointsActions